Analysis

  • max time kernel
    115s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18-10-2024 02:13

General

  • Target

    92a8cc4e385f170db300de8d423686eeeec72a32475a9356d967bee9e3453138.hta

  • Size

    74KB

  • MD5

    acfba6ff2e80e0ebc80df9e7d326337c

  • SHA1

    fe28d5756815fdac31a744a2f11c075f5b1892bc

  • SHA256

    92a8cc4e385f170db300de8d423686eeeec72a32475a9356d967bee9e3453138

  • SHA512

    2dcea669b4b3135bca6eba88542948188e25fb040db0a83bac03957b1fd59037998e7bb4a38774115ca051f07cbeacf99fd95113321e6c8fae4568a2e4e30f00

  • SSDEEP

    768:BfaGWSO85ALmEcHUfkJ7Bate4LV1VZ6Y3PaNNHpXKMcpgUj:gGZALNcH77BajLbf61NR1pcbj

Malware Config

Signatures

  • Blocklisted process makes network request 4 IoCs
  • Detected potential entity reuse from brand GOOGLE.
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Windows\SysWOW64\mshta.exe
    C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\92a8cc4e385f170db300de8d423686eeeec72a32475a9356d967bee9e3453138.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
    1⤵
    • Blocklisted process makes network request
    • System Location Discovery: System Language Discovery
    PID:2852

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads